CVE-2017-0296: Buffer Copy without Checking Size of Input

Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to elevate privilege when tdx.sys fails to check the length of a buffer prior to copying memory...

PT-2017-2849

Name of the Vulnerable Software and Affected Versions Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0 Description The issue is related to insufficient access control in the libeffects library of the Android Media Framework, which can be exploited by a remote attacker to...

PT-2017-2312

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description The issue is related to an elevation of privilege vulnerability in the MediaTek sound driver, which could allow a local malicious application to execute arbitrary code within the context of t...

PT-2017-2313

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 3.10 Android Kernel-3.10 Description The issue is related to a debugger in the Linux kernel's FIQ, which has inadequate access control. This could allow a remote attacker to elevate privileges and execute arbitra...

CVE-2017-4973

An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v257; UAA release 2.x versions prior to v2.7.4.14, 3.6.x versions prior to v3.6.8, 3.9.x versions prior to v3.9.10, and other versions prior to v3.15.0; and UAA bosh release uaa-release 13.x versions prior to v13.12,...

CVE-2017-4973

An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v257; UAA release 2.x versions prior to v2.7.4.14, 3.6.x versions prior to v3.6.8, 3.9.x versions prior to v3.9.10, and other versions prior to v3.15.0; and UAA bosh release uaa-release 13.x versions prior to v13.12,...

CVE-2017-4973

An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v257; UAA release 2.x versions prior to v2.7.4.14, 3.6.x versions prior to v3.6.8, 3.9.x versions prior to v3.9.10, and other versions prior to v3.15.0; and UAA bosh release uaa-release 13.x versions prior to v13.12,...

PT-2017-2325

Name of the Vulnerable Software and Affected Versions Windows Cursor versions in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and Windows Server 2016 Description The issue is related to insufficient access restrictions in the Windows Cursor component,...

PT-2017-16236

Name of the Vulnerable Software and Affected Versions Cloud Foundry Foundation cf-release versions prior to v257 UAA release 2.x versions prior to v2.7.4.14 UAA release 3.6.x versions prior to v3.6.8 UAA release 3.9.x versions prior to v3.9.10 UAA release versions prior to v3.15.0 UAA bosh releas...

Security Advisory - Multiple Vulnerabilities in UMA Products

The Unified Maintenance Audit UMA system provides a unified portal for O&M operations, controls and records users' O&M operations, and supports auditing by way of command display and video replay. The UMA product has the following vulnerabilities, which are introduced by software provided by...

PT-2017-15249

Name of the Vulnerable Software and Affected Versions RW-4040 tool version 1.2.0.0 Description The issue concerns an untrusted search path vulnerability that allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. This can be exploited to elevate privileges...

ElasticSearch X-Pack Security Elevation of Privilege Vulnerability

ElasticSearch X-Pack is an extension of the Elastic Stack log analysis system from the Dutch company Elasticsearch. security is one of the features used to control access rights. An elevation of privilege vulnerability exists in the runas feature in ElasticSearch X-Pack Security versions 5.0.0...

PT-2017-2420

Name of the Vulnerable Software and Affected Versions Microsoft Windows XP SP3 Microsoft Windows XP x64 XP2 Microsoft Windows Server 2003 SP2 Microsoft Windows Vista Microsoft Windows 7 SP1 Microsoft Windows Server 2008 SP2 and R2 SP1 Microsoft Windows 8 Description The issue is related to a...

PT-2017-3640

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to an elevation of privilege vulnerability in Qualcomm closed source components, which can be exploited to allow an attacker to elevate their privileges and execute arbitrary code. This is due ...

Google Android Qualcomm Shared Memory Driver Elevation of Privilege Vulnerability

Google Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, and the Qualcomm Shared Memory Driver is a Qualcomm-developed shared memory driver that is used in the... The Qualcomm Shared Memory Driver is a Qualcomm-developed shared memory...

IBM Distributed Marketing, Marketing Platform and Marketing Operations Remote Elevation of Privilege Vulnerability

IBM Distributed Marketing, Marketing Platform and Marketing Operations are all products of IBM Corporation in the U.S. IBM Distributed Marketing is a suite of omni-channel marketing solutions.IBM Marketing Platform IBM Distributed Marketing is an omni-channel marketing solution. IBM Marketing...

Apple macOS Sierra Intel Image Driver Elevation of Privilege Vulnerability

Apple macOS is an operating system that runs on Apple's Macintosh line of computers. An elevation of privilege vulnerability exists in the Apple macOS Sierra Intel Image Driver, which can be exploited by remote attackers to build malicious applications with elevated privileges...

EMC Isilon OneFS Remote Elevation of Privilege Vulnerability

EMC Isilon OneFS is a distributed file system that supports EMC Isilon Horizontally Scalable Storage System from EMC Corporation. The system combines the three layers of a traditional storage architecture file system, volume manager and data protection into a single unified software layer to crea...

PT-2017-2771

Name of the Vulnerable Software and Affected Versions Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 Description The issue is related to insufficient access control in the Android media framework, specifically in libstagefright. This can allow a remote attacker to elevate the...

PT-2017-2131

Name of the Vulnerable Software and Affected Versions Qualcomm Secure Execution Environment versions affected versions not specified Description The issue is related to incorrect verification of cryptographic signatures in PKCS1 mode. This could allow a remote attacker to elevate their privileges...